CVE-2024-6178

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Jun 20, 2024
CWE ID 79

Summary

CVE-2024-6178 is a Cross-Site Scripting (XSS) vulnerability affecting LG Electronics SuperSign CMS. The issue stems from improper neutralization of user input during web page generation. An attacker can exploit this vulnerability to inject malicious scripts into web pages viewed by other users, potentially stealing sensitive information or gaining unauthorized access. Affected versions of SuperSign CMS are from 4.1.3 before 4.3.1. Upgrading to a patched version is strongly recommended to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • LG SuperSign CMS

Affected Vendors

  • LG Electronics Inc.

Advisories, Assessments, and Mitigations